Privacy Policy.
How Prime Fast Pay collects, uses, stores, and shares information from US-based Merchants, the people acting on their behalf, and US payout recipients. We process data in the United States, for the United States.
01Scope
This policy applies to information we process about:
- US-based business customers ("Merchants") that integrate our API, dashboard, SDKs, or MCP server.
- Individuals acting on behalf of a Merchant — officers, beneficial owners, admin users, developers.
- US payout recipients whose data a Merchant submits to us for the sole purpose of executing a payout.
Prime Fast Pay's services are offered only to US-domiciled Merchants sending payouts to US recipients.
02Information We Collect
From Merchants (KYB)
- Bank details
- Employer Identification Number (EIN) or other US tax identification number
- Legal business name
- Website or product catalog
- Registered US business address
- Business phone number
Beneficial owners (any individual owning ≥ 25% of the Merchant, or a listed officer)
- Full name
- Social Security Number (SSN)
- Date of birth
- US residential address
From Merchant users and developers
Name, email address, phone number, role, API keys and key metadata, dashboard login and audit events.
Payout recipient data submitted by Merchants
Recipient name, contact details, US bank account or card details (tokenized in our SDK so that raw account and PAN data do not transit Merchant servers), payout amount in USD, and payment reference.
Technical and usage data
IP address, device and browser information, API request metadata, webhook delivery logs, and agent framework identifiers where an instruction originates from an MCP-connected agent (Claude Agent SDK, LangChain / LangGraph, Google ADK, CrewAI).
03How We Use Your Information
We use the information above to:
- Onboard Merchants and verify their business and beneficial owners.
- Route and settle outbound payouts across supported US rails (ACH Standard and Same-Day, RTP, FedNow, Push-to-Card, Virtual Card, Digital Check).
- Run sanctions (OFAC), PEP, fraud, and velocity screening before funds are reserved.
- Maintain the double-entry ledger and reconciliation records.
- Provide dashboard, API, SDK, webhook, and MCP-based access.
- Secure the platform and prevent abuse, including agent-initiated abuse.
- Provide customer and integration-engineering support.
- Comply with applicable US federal and state legal, tax, BSA / AML, and sanctions obligations.
04Pass-Through Data Collection
When you submit business entity documentation, corporate registration details, tax identification numbers, or ultimate beneficial owner (UBO) records through our platform or application programming interfaces (APIs), Prime Fast Pay acts solely as a secure transmission conduit for those specific verification artifacts.
05No Local Retention of Identity Documents and Biometric Data
Prime Fast Pay does not store, archive, or retain identity documents (such as passports, national identity cards, driver's licenses, or Social Security cards) or raw KYC biometric data in our databases or long-term servers. Once securely transmitted in transit, these specific data objects are wiped from our active processing pipelines.
06Direct Forwarding to Licensed Entities
All KYB and KYC data packets are encrypted in transit and transmitted directly via secure APIs to our regulated financial partners. These partners include US-licensed financial institutions, acquiring banks, and authorized payment processing gateways holding the requisite money-transmission and payment-processing licenses to conduct due diligence, risk underwriting, and ongoing compliance reviews.
07Independent Data Controllership
Upon transmission, our licensed partner financial institutions and identity-validation networks serve as independent data controllers regarding the review, decision-making, and mandatory statutory retention of your compliance files. Their handling and multi-year statutory retention of your records are governed by their respective privacy disclosures and relevant statutory US banking and AML mandates.
08Information Sharing
We do not sell or rent personal information. We share information only:
- With licensed financial partners, banks, and US rail operators as needed to execute a payout.
- With sanctions (OFAC), PEP, fraud, and identity-verification providers.
- With sub-processors (cloud hosting, logging, communications) under written data-processing terms.
- With US federal or state authorities where required by law, subpoena, or other lawful request.
- In connection with a corporate transaction (merger, acquisition, financing), subject to equivalent protections.
- With your consent, for any purpose not listed above.
09AI Agents and Automated Instructions
Where a Merchant integrates Prime Fast Pay via our MCP server, a payout instruction may originate from an AI agent operating under that Merchant's API key. All such instructions pass through the same validation, screening, and human-in-the-loop approval controls as manually initiated payouts. The Merchant remains responsible for any personal data supplied to us through an agent-initiated call and for the actions of any agent operating under its credentials.
10US-Only Operations
Prime Fast Pay is incorporated in the State of Wyoming and offers its services only within the United States. We do not knowingly onboard Merchants or process payouts to recipients outside the United States. Personal data collected under this policy is processed and stored in the United States. If you are located outside the United States, please do not submit personal data to us.
11Data Retention
Merchant, user, ledger, and audit records are retained for the period required by applicable US federal and state AML, tax, and financial-services legislation — generally five years from the end of the relevant business relationship or transaction, unless a longer period is required — and for the period necessary to defend legal claims.
As described in §§5–7, identity documents and biometric data are not retained by us; statutory retention of those artifacts is performed by our licensed partners.
12Data Security
We implement technical and organizational measures aligned to the controls described on our platform, including:
- AES-256-GCM encryption at rest, TLS 1.3 in transit.
- HSM-backed key management for ledger data.
- Mutual TLS for service-to-service traffic and zero-trust networking.
- Segregation of Merchant funds from operating accounts, reconciled daily.
- Multi-region, active-passive deployment with quarterly failover testing.
- Immutable audit trail for every payout lifecycle.
- Scoped API keys, including sandbox
sk_test_keys that never move real money. - Role-based access and human-in-the-loop approval thresholds.
- Regular security assessments and PCI DSS controls where applicable.
13Your Rights
Wyoming has not enacted a comprehensive consumer privacy statute. However, several other US states have enacted such laws — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others — and those laws may apply to our processing of personal information about residents of those states even though Prime Fast Pay is based in Wyoming.
Where applicable, you may:
- Access and review the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your data, subject to statutory retention obligations applied by our licensed partners and by us under US financial-services law.
- Opt out of the sale or sharing of personal information — Prime Fast Pay does not sell personal information or share it for cross-context behavioral advertising.
- Limit the use of sensitive personal information.
- Be free from retaliation for exercising these rights.
California residents have additional rights under the California Consumer Privacy Act as amended by the CPRA, including the right to know the categories of personal information collected, the sources, the business purposes, and the categories of third parties with whom it is shared.
14Cookies and Tracking
We use cookies and similar technologies on our marketing and dashboard sites to enhance your experience and analyze usage patterns. You can control cookie settings through your browser preferences and, where applicable, through our cookie banner.
15Children
Prime Fast Pay is a B2B service and is not directed to individuals under 18. We do not knowingly collect personal information from children.
16Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted here with a revised "Last updated" date and, where required, communicated to Merchants directly.
17Contact Us
Reach the right team directly, or send postal mail to our registered Wyoming address.
Postal address
Attn: Privacy Office
30 N Gould St, Ste R
Sheridan, WY 82801
United States
Ready to move money on the fastest rail?
Spin up a sandbox in minutes, or talk to our team about your corridors, volume, and rollout. Production access needs a short compliance conversation first.